SURJECTIVITY OF MOD 2 n REPRESENTATIONS OF 
ELLIPTIC CURVES 
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Associated to an elliptic curve E/<Q and a prime I are representations 

p t n : Gal(Q/Q) — > Aut E[l n ] ^ GL 2 {Z/l n Z) 

and their inverse limit, the Z-adic representation 

Pl : Gai(Q/Q) — > AutT,£7 9* GL 2 (Z ; ). 

As explained by Serre (0 IV, 3.4), for I > 5 the group SL^Z;) has no proper 
closed subgroups that surject onto SL2(F/), so 

pi surjective => p\ surjective for / > 5. 

The condition I > 5 is necessary, and 

pin surjective ftn+i surjective for l n = 2, 3, 4. 

Elliptic curves with surjective mod 3 but not mod 9 representation have 
been classified by Elkies [I], and the purpose of this note is to do this in the 
'2 not 4' and '4 not 8' cases as well: 

Theorem. Let E : y 2 = x 3 + ax + b be an elliptic curve over Q with 
discriminant A = — 16(4a 3 +27o 2 ) and j -invariant j = — 1728(4a) 3 /A. Then 

(1) p2 is surjective 44> x 3 + ax + 6 is irreducible and A ^ Q x2 . 

(2) p4 is surjective 44> p2 is surjective, A ^ — 1-Q x2 and j 7^ — 4t 3 (t + 8) 
/or any t G Q. 

(3) p8 *s surjective 44> ^4 is surjective and A ^ ±2 • Q x2 . 

Proof. The x-coordinates of the three non-trivial 2-torsion points are the 
roots of x 3 + ax + 6 and their y-coordinates are 0. So p2 surjects onto 
GL2(F2) = 5*3 if and only if this cubic is irreducible and its discriminant 
A/16 is not a square. Note that this proves (1) and that Q(-E[2]) contains 
Q(VA). 

Now recall that by the properties of the Weil pairing, Q(E[n]) D Q(Cn) 
and the corresponding map Gal(Q(i?[n])/Q) -» (Z/nZ) x is simply the de- 
terminant. In particular, 

Q(E[4]) D Q(VA, and Q(£[8]) D Q(VK, y^l, y/2). 

Incidentally, as there are elliptic curves whose 2-torsion defines an SVexten- 
sion of Q which is disjoint from Q(Cs)> e -g- y 2 = x 3 — 2, this shows that the 
canonical maps (mod 2, det) 

GL 2 (Z/4Z) — > S 3 x (Z/4Z) X and GL 2 (Z/8Z) — > S 3 x (Z/8Z) X 
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are surjective (being already surjective on the subgroups Im p& and Im p$ for 
this elliptic curve). Hence, if an elliptic curve E/Q has surjective p^, then 
Q(E[2]Xa) has degree 12, so Q(\/A, \[— T) has degree 4. Similarly, if p$ is 
surjective, then Q(\/A, V — 1, V 7 ^) has degree 8. 

(3) If is surjective, then so is p4, and as Q(\/A) / Q(y / ±2), it follows 
that A ^ ±2 • Q x2 . Conversely, if p4 is surjective and A ^ ±2 • Q x2 , then 
Q(\/A, \J— 1, \/2) is a C2 x C2 x ^-extension of Q. So Imps surjects onto 
GL2(Z/4Z) and onto (Z/8Z) X , and possesses a C2 x C2 x ^-quotient. A 
computation shows that the only such subgroup of GL2(Z/8Z) is the full 
group itself. 

(2) The argument is the same as for (3), except that in this case GL2(Z/4Z) 
does have a (unique up to conjugacy) proper subgroup which surjects onto 
GL2(Z/2Z) and onto (Z/4Z) X , and has a C2 x ^-quotient. This group has 
index 4, and is conjugate to i/24 = ((30)' (1 1)) - ft ^ A> The following 
lemma completes the proof. □ 

Lemma. Let E/Q be the elliptic curve y 2 = x 3 + ax + b with b ^ 0. The 
following conditions are equivalent: 

(1) Gal(Q(£'[4])/Q) is conjugate to a subgroup of H24. 

(2) The polynomial 

f(x) = x 4 - 4ax 3 + 6aV + 4(7o 3 + 546 2 )x + (17a 4 + 108a6 2 ) 

has a rational root. 

(3) j(E) = -4t 3 (t + 8) for some t G Q. 

Proof. (1)4^(2). Regard a and b as indeterminants and E as a curve over 
K = Q(o, b). Consider the 4-torsion polynomial (cf. ^4 i n 13] Exc. III. 3. 7) 

tfj( x ) = x 6 + 5ax 4 + 20bx 3 - 5a 2 x 2 - Aabx - (a 3 + 86 2 ). 

Its roots xi, ...,xe G A" are the x-coordinates of the primitive 4-torsion points 
of E. Pick a basis P = (x\,y\),Q = (^2,2/2) for the 4-torsion, and for each 
of the four left cosets C of i^24 in GL2(Z/4Z) define 

9c = 52x(jgP)x(gQ), 

g&C 

where x(-) is the x-coordinate. The 9c are distinct, which can be checked 
by specialising e.g. a i->- 0, b t-t 1, where the numbers are 0, —6, 3 ± 3V— 3. 

Now for h G Gal(K(E[4])/K) C GL 2 (Z/4Z) we have h(9 c ) = hC , and 
hence the polynomial 

f(x) = H(x - 6 C ) = f>x 4 

c 8=0 

has coefficients in K. The roots x% G K of ^ are integral over i? = Z[a, 6], 
and therefore so are the 6c- Because R is integrally closed in its field of 
fractions K and the Aj are both in K and are integral over R, they lie in R. 
Moreover, if we rescale a \-> s 2 a, b h-» s 3 6, then the roots of ip(x) change to 
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Xi sxi, and therefore 9 c s 2 9c- So Aj must have weight 2i, in the sense 
that 

Ai G Zo, A 2 G Za 2 , A 3 G Za 3 + Z6 2 and A 4 G Za 4 + Za& 2 . 

Now we can compute / numerically for a few specialisations a, b G Z (using 
complex uniformisation of torsion points and rounding the coefficients) to 
deduce the exact formulae for the Aj, and we find that f(x) = /(4a;). 

Let us return to a, 6 G Q, constructing ^, ^ an d / in the same way. Note 
that the discriminant of / is 3 6 6 2 A|;, so it has no repeated roots and the 
9c are distinct. Now h : 9c 9hc defines a transitive action of GL2(Z/4Z) 
on these, and for h G Gal(Q(£'[4])/Q) it coincides with the Galois action 
9c !->• h{9c)- Because all four 9c are distinct, the stabiliser of 9h 24 is 
precisely H24, and the stabilisers of the others are the conjugates of i?24- So 
Gal(Q(E'[4])/Q) is conjugate to a subgroup of H24 if and only if one of the 
9c is rational, equivalently if / has a rational root. 

(2)<^(3). First note that if a = 0, equivalently j = 0, then both conditions 
are satisfied (/(0) = and j = 0). Suppose a / and that f(x) has a 
rational root r. Then u = r/a satisfies 



■ ' ' — ; (i ----- ud — hi ~r ■) i— 7 ; a ~r ■ '■ • - • ic 

* +0 ™ «f „■ - 1728 ( 4 ") 3 ( n Qmolir ^ - 4(j-1728)- 



n 4 - 4u d + 6u 2 + 4(7 + 54^)u + (17 + 108-^) = 0. 



Rewriting in terms of j = 16(4aa l + °^ 2) (namely = — u 27j - ' ), we find 
that j = -27648^^-. Replacing u by ^ + 1 we get j = -4t 3 (t + 8), as 
claimed. Reversing the argument gives the other implication as well. □ 

Remark. The elliptic curve 

o , 3t 2 + 24t 2t 2 + 28t + 96 . , 

V = X - -75 : X = (t ^ -8) 

y t 2 - At + 12 t 2 - At + 12 v ^ ; 

has j-invariant — 4i 3 (i + 8). So for every curve of this form the polynomial 
f(x) has a rational root and, conversely, every elliptic curve over Q for which 
f(x) has a rational root is a twist of a curve in the family. 
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